Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon
- Policy ID
- CloudKerberosTicketRetrievalEnabled
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2019, Windows 10 Version 2004
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Kerberos
Description
This policy setting allows retrieving the Azure AD Kerberos Ticket Granting Ticket during logon.
If you disable or do not configure this policy setting, the Azure AD Kerberos Ticket Granting Ticket is not retrieved during logon.
If you enable this policy setting, the Azure AD Kerberos Ticket Granting Ticket is retrieved during logon.
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters View registry values
- CloudKerberosTicketRetrievalEnabledREG_DWORD